Security Test: High number of Secrets¶

Scanner(s) Support¶

Description¶

Default Severity: high

When secrets management is not properly implemented, sensitive credentials like API keys, tokens, and passwords can leak to the public. It may lead to data breaches, unauthorized access, financial loss and even legal penalties.

Configuration¶

Identifier: sensitive_data/high_number_of_secrets

Examples¶

All configuration available:

checks:
  sensitive_data/high_number_of_secrets:
    skip: false # default
    options:
      detection_threshold: 1 # default

Increase the Detection Threshold

 checks:
   information_disclosure/high_number_of_secrets:
     options:
       detection_threshold: 10

Options¶

Options can be set in the options key of the Security Test Configuration.

Compliance and Standards¶